Package Health

advancedideasmechanics/mezzio-ga-middleware

The license, README, matching repository, and build/security tooling improve transparency. The tiny release history and single-contributor activity leave limited evidence of durable maintenance, while workflow hygiene adds avoidable supply-chain exposure.

Latest v0.0.4PackagistPackagist

57%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

All four releases appeared within about 24 minutes, and the package is only 54 days old. This provides limited evidence of an established maintenance cadence.

Repo bus factorcaution

One contributor made all four recent commits, concentrating maintenance knowledge in a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository had four commits in the last three months, all within the measured activity window. The amount of activity is modest and does not yet demonstrate durable maintenance.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities, although Semgrep scanning provides partial compensation.

Version stabilitycaution

Version v0.0.4 is not a prerelease, but the 0.x version indicates an immature API and limited demonstrated stability.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Matthew Pallotta

Direct Dependencies

DependencyLast ReleaseScore
mezzio/mezzio-router
Version ^3.0 || ^4.0
mezzio/mezzio-template
Version ^2.0 || ^3.0
laminas/laminas-diactoros
Version 3.8.0
psr/http-server-middleware
Version ^1.0.0

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform